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Changes to the Claims 
1 .(currently amended) A system for controlling access to information items comprising; 

a) a storage subsystem containing definitions of customer groups, customer information 
including which customer group or groups to which each customer belongs, information item 
definitions including which customer group or groups with which each information item is 
associated, a set of group source keys, each group source key being associated with a different 
one of the customer groups, a sfitof group member keys, each group member being associated 
within a different one of said group source keys; 

b) an encryption subsystem for encrypting i nfor ma t i o n items information items 
associated with a customer group using the group source key associated with the same group; 
and 

c) an authentication subsystem for allowing a customer access to a group member key 
once the customer has been authenticated as a member of the customer group with which the 
group member key is associated, thereby enabling the customer to use the group member key to 
decrypt item information previously encrypted using the associated group source key. 

2. (currently amended; A system as defined in claim 2 wherein the authentication subsystem 
further includes: 

a) an authentication storage subsystem for storing customer identifiers and associated 
passwords; and 

b) authentication logic for receiving customer identifier and password inputs, comparing 
the received inputs to stored customer identifiers and associated passwords, and authenticating 
the inputs provider provided when the inputs ma t ched match the stored corresponding 
information. 

3, (original) A system as defined in claim 1 wherein the information items including pricing 
inforrnauon. 
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4.(currently amended) A system as defined in claim 2 wherein the information items i ncluding 
include pricing information, 



5 (original) A method for controlling access to information items comprising the steps of: 

a) storing definitions of customer groups; 

b) storing customer information including which customer group or groups to which each 
customer belongs; 

c) storing information items including which customer group or groups with which each 
information item is as$ociated; 

d) storing sets of key pairs, each key pair being associated with one of the defined 
customer groups and comprising a group source key and a group member key; 

c) encrypting ar least one information item using the group soucc key for the group 
within which the information item is associated, and 

0 providing the group member keys to customer members of the groups with which the 
group member keys are associated, thereby enabling a customer to decrypt an encrypted 
information item associated with the customer's group. 

6,(original) A method as defined in claim 5 wherein the stored customer information includes 
customer identifiers and passwords and wherein the providing step further includes the steps of: 

a) receiving customer identifier and password inputs; 

b) comparing the received inputs to stored customer identifiers and passwords; 

c) responding to a match between the received inputs and a stored customer identifier 
and password by identifying the customer as having been authenticated; and 

d) making available the group member key associated within a customer group to which 
the authenticated cusiomer belongs. 
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7(original) A program product having a computer-readable medium storing computer-readable 
program code for controlling access to information items, said computer-readable program code 
comprising: 

a) code for causing the storage of definitions of customer groups; 

b) code for causing the storage of customer information including which customer group 
or groups to which each customer belongs; 

c) code for causing the st&rage of information items including which customer group or 
groups with which each information item is associated; 

d) code for causing the storage of sets of key pairs, each key pair being associated with 
one of the defined customer groups and comprising a group source key and a group member key; 

e) code for encrypting at least one information item using the group source key for the 
group with which the information item is associated; and 

f) code for providing the group member keys to customer members of the groups with 
which the group member keys are associated, thereby enabling a customer to decrypt an 
encryped information item associated with the customer's group, 

8 (originaI) A program product as defined in claim 7 wherein the stored customer information 
includes customer identifiers and passwords and the program product further includes: 

a) code tor receiving customer identifier and password inputs; 

b) code for comparing the received inputs and a stored customer identifier and password 
to identify the customer as having been authenticated; 

c) code responsive to a match between the received inputs and a stored customer 
identifier and password to identify the customer as having been authenticated; and 

d) code responsive to the authentication to make available the group member key 
associated with a customer group to which the authenticated customer bclongs. 



QW7},967 



PAGE 6/8 * RCVD AT 1/20/2005 3:19:18 PM [Eastern Standard Time] » SVR:USPT0-EFXRM/1 * DNIS:8729306 * CSID:919-2544330 ■ DURATION (mm-ss):02-08 



